Privacy Policy

FinOpsly is the complete FinOps platform designed to support the entire FinOps lifecycle for Cloud cost management, from visibility, cost allocation to optimization and governance. At FinOpsly, we are committed to protecting your privacy and safeguarding your personal data. This Privacy Policy outlines how we collect, use, and protect your information while explaining your rights and privacy interests.

We may update this Policy periodically, and we encourage you to check it regularly to stay informed of any changes. Revisions to this Policy will take effect once they are posted on our website or through our Software Services. By continuing to use our website or Software Services after updates are made, you acknowledge and accept the revised Policy, subject to applicable law. Refer to “ Updates To This Privacy Policy” section below.

This Privacy Statement outlines how we collect, use, share, or process Personal Data, the circumstances under which we do so, and your rights associated with that processing. It applies to the following activities:

• Personal Data collected when you visit our websites that display or link to this Privacy Statement.
• Information collected when you visit our offices, which may include visitor logs or security camera recordings.
• Data collected when you interact with our branded social media pages.
• Information shared during communications via emails, phone calls, texts, messaging platforms, or faxes.
• Personal Data collected when using our software-as-a-service (SaaS) and software products ("Products") and related support or consulting services (“Services”), where we act as a controller of your Personal Data.
• Information about employees of our customers shared with us during the contracting process or while using our Products and Services.
• Data collected when you register for, attend, or participate in our events, webinars, programs, or training sessions.
• Personal Data shared on our community site for exchanging ideas, best practices, and collaboration with other customers, partners, and our employees.
• Information provided when participating in surveys, research, or similar data collection activities facilitated by us.
• Personal Data collected or shared with us by partners from publicly available information you have published or made available online, as detailed in their respective privacy policies.
• Information such as device details, IP address, browsing activity, and interactions with our website.
• Data collected through cookies and tracking technologies to enhance your experience and analyze site usage.

Comprehensive PII (Personally Identifiable Information)

While we collect and process Personal Information from our existing and prospective customers, vendors, and partners, this Privacy Statement does not apply to third-party services that are governed by their own terms and conditions governed by separate terms, agreements, or privacy policies, even if they integrate with or interact with our Products. Product delivery, access, and usage are subject to agreements between us and each customer, who retains control over their deployment and the data hosted within.

Below are the contexts in which we collect Personal Information:

• Contact information (e.g., name, company name, email, phone) is required when customers register to use our Software Services and related offerings, such as training and support. Customers may voluntarily share additional details (e.g., job title, department, mailing address, industry).
• Log files and system usage data are collected, such as login activity and interactions with our Software Services.
• With consent, customer testimonials, which may include names and other Personal Information, are posted on our website.
• Customer contact details may be used to share information about our products, services, and updates
• Personal Information about vendor or partner employees may be provided to us for the purpose of delivering services or supporting the relevant partnership.

How We Use Your Personal Data

At FinOpsly, we use your Personal Data to operate our business, enhance and customize our Websites, Products, and Services, and communicate with you about our offerings. Below are the purposes for which we may use your Personal Data, in compliance with applicable laws:

• To understand your preferences and improve your interactions with our Websites, Products, and Services.
• To send account-related communications, including confirmations, account verification, invoices, technical notices, updates, security alerts, and support or administrative messages.
• To inform you about promotions, events, and marketing activities, including news about FX and selected partners’ products and services, based on your communication preferences.
• To personalize your experience by linking or combining your data with other Personal Data from third parties.
• To collect Personal Data from external sources (e.g., business contact information providers) for targeted advertising, profiling, and delivering relevant content.
• To use professional and employment-related information (e.g., job titles, email addresses, phone numbers, social media profiles) to better understand customer needs, expand records, and create tailored offerings.
• To enforce terms and conditions and protect our business, partners, and users.
• To operate and maintain the functionality and performance of our Websites and Products.
• To manage registrations for events and maintain customer profiles in our records.
• For industry analysis, benchmarking, and marketing insights.
• To manage billing and contracting activities.
• To monitor and ensure the performance, integrity, and stability of our Products and Services.
• To address technical or service issues and track entitlements.
• To make tailored recommendations regarding your use of our Products.
• To comply with legal obligations and safeguard FinOpsly’s confidential and proprietary information.
• For other legitimate business purposes, such as analytics, support, and maintaining our infrastructure.

For individuals in the European Economic Area (EEA), our use of Personal Data is based on:

• Where you have provided consent for specific uses of your data.
• Where the data is necessary to fulfill a contract with you.
• Where processing is in our legitimate interests and not overridden by your rights or interests.
• Where required to comply with applicable laws.

We are committed to ensuring transparency and respecting your data rights. You can adjust your communication preferences at any time.

How We Share Your Personal Data

At FinOpsly we may share your Personal Data with third parties to operate our business, deliver and improve our Products and Services, communicate with you, and for other legitimate purposes permitted by applicable law or with your consent. Below are the ways we may share your Personal Data:

• Personal Data may be shared with FinOpsly’s global subsidiaries, which will process your data in accordance with this Privacy Policy.
• Third-party vendors, contractors, consultants, and service providers performing services on our behalf, such as processing orders, managing credit card transactions, hosting websites and event registrations, assisting with sales and support, and providing Products and Services.
• Profile information, content, and technical details related to your use of our Products may be shared with other authorized users of the platform, depending on account settings and content designations.
• In connection with, or during negotiations for, mergers, acquisitions, sales of company assets, restructuring, financing, or similar transactions involving FinOpsly or its subsidiaries.
• In response to requests from competent authorities, legal processes, or as otherwise required by applicable law or regulation.
• With law enforcement, government authorities, or other parties to meet national security requirements, protect the rights and safety of FinOpsly, its partners, users, or others.
• Data shared in a de-identified format that cannot reasonably be used to identify you.
• FinOpsly’s website connects with third-party services such as Facebook, Google Analytics, LinkedIn, Twitter, and others. If you choose to share information from FinOpsly's website through these services, you should review the privacy policy of that service. If you are a member of a third-party service, the connections may allow that service to connect your visit to our site to your personal data.

What We Do Not Do:

We do not sell, rent, or trade Personal Data collected through our website with third parties for their promotional purposes. FinOpsly is committed to protecting your data and sharing it responsibly only when necessary to fulfill our business obligations or with your explicit consent.

How We Secure Your Personal Data

At FinOpsly, we employ a combination of physical, administrative, and technical measures to protect your Personal Data from unauthorized access, use, or disclosure. Additionally, we require our service providers to adhere to strict contractual obligations to safeguard your data. Access to Personal Data is strictly limited to employees, contractors, agents, and third parties who have a legitimate business need.

How Long We Retain Your Personal Data

We retain your Personal Data only as long as necessary to fulfill the purposes for which it was collected. This includes meeting business needs, complying with legal and regulatory obligations, resolving disputes, protecting our assets, and enforcing agreements. Once your data is no longer required, we securely delete, anonymize, or isolate it from further processing until deletion is feasible.

Controlling Your Personal Data

FinOpsly provides options for managing your Personal Data and communication preferences:

• Marketing emails include options to "opt-out" or unsubscribe.
• In certain jurisdictions (e.g., EEA and California), you may have additional rights under applicable laws, such as:
• Accessing, correcting, or updating your data.
• Deleting your data or restricting its processing.
• Requesting a copy of your data or transferring it to another entity.
• Objecting to specific processing activities.

You can exercise your rights by contacting us through the details provided in the How to Contact Us section. Requests will be addressed in line with applicable laws, and we may request additional information to verify your identity. Authorized agents acting on your behalf may need to provide proof of authorization.

Service notifications and other communications essential for the use of FinOpsly Products or Services will continue unless you discontinue or cancel access. In cases where we must retain data to comply with legal requirements, appropriate safeguards will be implemented to prevent further processing.

California Privacy Disclosures

Under the California Consumer Privacy Act (CCPA), businesses are required to provide additional disclosures regarding California consumers' rights to access, delete, and control the sharing of their Personal Data. FinOpsly complies with these requirements and provides transparency about how Personal Data is shared and disclosed, as outlined in the section above titled.

How We Share Your Personal Data.

California consumers have the right to:

• Request information about the collection and use of their Personal Data.
• Access and delete their Personal Data, subject to applicable legal exceptions

FinOpsly does not sell the Personal Data of California consumers and does not discriminate against individuals who exercise their privacy rights. Additionally, we do not collect or process "sensitive" data or protected characteristics under applicable laws for the purpose of inferring personal characteristics.

If you are a California resident and wish to exercise your privacy rights, you or your authorized agent can contact us using the information provided in the How to Contact Us section. To fulfill your request, we may need to verify your identity and confirm your place of residence.

Event participants can update their profiles through the event registration platform while the event website remains active.

International Data Transfers

FinOpsly is headquartered in the United States, and any information we collect from you will be processed in the United States. By using FinOpsly’s services, you acknowledge and consent to the processing of your Personal Data in the United States. It is important to note that the United States has not been deemed to provide an “adequate” level of data protection by the European Union under Article 45 of the General Data Protection Regulation (GDPR).

To ensure appropriate safeguards, as required under Article 46 of the GDPR, FinOpsly relies on binding standard contractual clauses (SCCs) that are enforceable by individuals in the European Economic Area (EEA) and the United Kingdom (UK). These clauses incorporate guidance from the European Data Protection Board and are updated in alignment with the latest legal standards, including new model clauses when approved.

In certain situations, FinOpsly may collect and transfer Personal Data to the U.S. based on:

• Your explicit consent
• The necessity to perform a contract with you
• A compelling legitimate interest that does not override your data protection rights and freedoms.

FinOpsly is committed to implementing robust safeguards to ensure the privacy and security of your Personal Data. We process your data in accordance with your relationship with FinOpsly and as outlined in this Privacy Policy. Additionally, FinOpsly establishes data processing agreements and includes standard contractual clauses with vendors wherever practical and appropriate.

FinOpsly is committed to ensuring that Personal Data is handled responsibly and in compliance with applicable laws when transferred internationally. Our practices include:

• FinOpsly processes Personal Data as directed by our customers or as required by applicable laws and regulations.
• Personnel with access to Personal Data are bound by strict confidentiality agreements to protect the integrity and privacy of the data.
• We implement robust technical and administrative measures to secure Personal Data against unauthorized access, loss, or misuse.
• FinOpsly supports customers in addressing requests from individuals regarding their Personal Data, including access, corrections, or deletions, as required under applicable privacy laws.
• FinOpsly assists customers in meeting their legal obligations, including notification of data breaches where required.
• At the conclusion of a customer contract, FinOpsly will delete Personal Data unless retention is required or permitted under applicable laws.
• FinOpsly provides necessary documentation and information to help customers fulfill regulatory and audit obligations.
• When engaging subprocessors to process Personal Data, FinOpsly obtains prior customer consent. Customers can review the list of approved subprocessors and receive updates through mechanisms described in the relevant documentation.

We encourage customers to review these commitments, which reflect FinOpsly’s dedication to compliance, security, and privacy. These measures ensure not only adherence to applicable regulations such as the GDPR but also demonstrate our proactive efforts to maintain robust privacy standards. FinOpsly values its partnership with customers and suppliers in fostering a culture of compliance and data protection.

Since its inception, Finoplsy has not received any government requests for access to Personal Data.

Cookies and Web Beacons

FinOpsly uses cookies, web beacons, and similar tools to enhance user experiences and gather insights:

• Cookies: Small text files stored in your browser that remember user preferences and facilitate website functionality.
• Web Beacons or Pixel Tags: Small codes embedded in emails or web pages that track user behavior and provide analytical data.

Although FinOpsly makes efforts to honor "Do Not Track" (DNT) browser signals, a lack of a unified industry standard limits consistent responses. We monitor DNT developments and adapt as standards evolve.

To manage cookies, click the Cookie Settings icon on the Website or adjust your browser preferences. Cookies used in FX Products serve several purposes:

• Essential Cookies: Enable authentication and account access.
• Performance Cookies: Enhance functionality, such as remembering preferences or delivering in-product educational content.
• Analytical Cookies: Provide insights to improve services and resolve technical issues.

By using these technologies responsibly, FX aims to improve user experiences while maintaining transparency and control over data usage.

General Links to Third-Party Websites

Our website may include links to external websites that

• Are not associated with FinOpsly
• Operate independently from our organization
• Are not governed by this Privacy Policy ("Third-Party Websites").

These links are provided solely for your convenience. The inclusion of a link does not signify an endorsement of the website’s content, security, or reliability by FinOpsly. We are not responsible for the privacy practices or data collection methods of Third-Party Websites, which may handle your information differently than FinOpsly. Your use of any Third-Party Websites is at your own discretion and risk. We recommend reviewing the privacy policies of these external websites to understand how they collect, use, and protect your information. Additionally, other parties may gather information about your online behavior across various websites over time when you interact with FX’s Website or Services.

Children's Data

FinOpsly does not intentionally collect Personal Data from children without verified consent from a parent or guardian. If you believe we have collected information from someone under the age of consent in your region without proper authorization, contact us via the How to Contact Us section. We will promptly investigate and take appropriate action.

Updates to This Privacy Policy

FinOpsly may revise or update this Privacy Policy to reflect changes in our practices or business operations. We encourage users to check this page periodically for updates. When significant changes occur, we will update the policy and indicate the new effective date. By continuing to use FinOpsly Websites, Products, or Services, or by participating in our Events after updates are published, you agree to the terms of the revised Privacy Policy as of the effective date.

Consent

• We obtain your consent to process your personal information in the following instances:
• When you sign up for our services or newsletter.
• When you provide feedback or contact us via forms.
• When cookies or analytics tools are used to collect information about your online behavior.

You can withdraw your consent at any time by contacting us or adjusting your cookie preferences through our website settings.

Data Subject Rights

As a data subject, you have the following rights under applicable data protection laws:

• Right to Access: Obtain a copy of your personal data we hold.
• Right to Rectification: Request correction of incomplete or inaccurate data.
• Right to Erasure: Request deletion of your data, subject to legal or contractual obligations.
• Right to Restriction: Restrict processing of your data in specific circumstances.
• Right to Data Portability: Receive your data in a structured, commonly used format for transfer to another controller.
• Right to Object: Object to data processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw your consent at any time, where consent is the basis for processing.

To exercise these rights, contact us at privacy@FinOpsly.com. We will respond within the timelines required by applicable laws.

Data Breach

In the event of a data breach that involves your personal information:

• We will notify affected individuals promptly, in accordance with applicable laws.
• The notification will include details of the breach, affected data categories, potential consequences, and measures to mitigate risks.
• We will also report significant breaches to relevant regulatory authorities.

We have implemented strict security measures, including encryption, access controls, and regular security audits, to minimize the risk of data breaches.

Legal Entity

This Privacy Policy is issued by FinOpsly Inc., Cincinnati, Ohio, USA - registered corporation with its principal office at 425, Walnut Street, Suite 1800, Cincinnati, Ohio, 45202. FinOpsly is the data controller responsible for processing your personal information when you interact with our website, FinOpsly.com, or use our services.

How to Contact Us:

DPO

To address any questions or concerns regarding Finoplsy’s data privacy policies or practices, we have appointed an internal Data Protection Officer (DPO) as your primary contact. If you wish to exercise your privacy rights or need assistance with matters related to your Personal Data, please direct your inquiries to FinOpsly’s Data Protection Officer.

You can contact the Data Protection Officer using the details provided below:

FinOpsly Inc
ATTN: Data Protection Officer
425, Walnut Street, Suite 1800,
Cincinnati, Ohio, 45202
privacy@FinOpsly.com

Please reach out to the DPO with any privacy-related inquiries, and we will respond promptly and in accordance with applicable data protection laws.